QwikSec

Security Database

CVE

CWE

Training

CVE-2013-3619

Published: Jan 2, 2020

Modified: Aug 6, 2024

PUBLISHED

Description

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.

Vendor	Product	Versions
Supermicro	IPMI	affected `before SMT_X9_317 and before SMT X8 312`

References

https://support.citrix.com/article/CTX216642

x_refsource_CONFIRM

http://support.citrix.com/article/CTX216642

x_refsource_CONFIRM

https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ipmi-firmware-vulnerabilities

x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/89044

x_refsource_MISC

https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.